Wind River Support Network

HomeDefectsLIN8-9254
Fixed

LIN8-9254 : Security Advisory - taglib - CVE-2018-11439

Created: May 31, 2018    Updated: Apr 9, 2019
Resolved Date: Apr 1, 2019
Found In Version: 8.0.0.25
Fix Version: 8.0.0.30
Severity: Standard
Applicable for: Wind River Linux 8
Component/s: Userspace

Description

The TagLib::Ogg::FLAC::File::scan function in oggflacfile.cpp in TagLib 1.11.1 allows remote attackers to cause information disclosure (heap-based buffer over-read) via a crafted audio file.

https://nvd.nist.gov/vuln/detail/CVE-2018-11439

CVEs

Live chat
Online
  • Linkedin
  • Facebook
  • Twitter
  • Youtube